Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/47kxAtPzB92ke9Gj45R1nUWgVnw.roa
File: 47kxAtPzB92ke9Gj45R1nUWgVnw.roa (raw, json)
Hash identifier: 46PaY742P+aUzn0nYc8F6xejf4fKE+vYdbMHMykBm6k=
Subject key identifier: E3:B9:31:02:D3:F3:07:DD:A4:7B:D1:A3:E3:94:75:9D:45:A0:56:7C
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019F9042747638867577BE95D9D5C1B2CED1
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/47kxAtPzB92ke9Gj45R1nUWgVnw.roa
Signing time: Thu 23 Jul 2026 18:35:01 +0000
ROA not before: Thu 23 Jul 2026 18:35:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216067
IP address blocks: 104.167.26.0/23 maxlen: 23
176.116.4.0/24 maxlen: 24
185.77.23.0/24 maxlen: 24
185.188.16.0/24 maxlen: 24
217.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:42:74:76:38:86:75:77:be:95:d9:d5:c1:b2:ce:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Jul 23 18:35:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3b93102d3f307dda47bd1a3e394759d45a0567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:af:3b:83:d8:d6:e2:6b:ae:0d:ae:9d:bd:
88:89:85:5a:a9:e9:f3:72:ac:f0:59:96:d2:df:6e:
0b:ac:8f:ff:1d:48:42:ab:66:7a:d6:08:af:b8:de:
1b:3b:c7:de:92:38:78:9c:5d:34:6e:49:91:ad:3d:
b9:3d:f0:ff:a7:18:1e:4d:88:bd:21:86:a2:d9:ae:
f1:75:9b:09:f7:ac:f5:61:67:83:4a:f4:9c:ca:c2:
a5:0a:04:e7:e8:e9:6b:ff:40:aa:d5:b9:ee:45:a0:
51:86:0c:61:59:33:84:95:61:ee:43:cf:fb:d2:f4:
f0:3f:2b:ba:bc:27:25:96:39:7c:0b:0c:35:5f:80:
7b:9c:e7:cf:ff:2c:db:f8:99:8d:62:a6:01:09:40:
4d:e9:c6:5f:78:93:c3:50:0f:fb:cc:8d:ce:80:97:
7f:3a:b0:49:47:2f:48:44:a3:a3:2e:3b:9b:45:cc:
aa:db:d6:8a:cf:0a:bd:77:e1:b2:d3:07:8c:7b:64:
8e:88:8d:33:c0:d9:7a:5c:13:7c:b6:ac:d5:5a:b3:
45:c9:85:51:11:69:4f:dd:3b:a6:37:df:79:9e:6f:
6c:fe:29:47:57:f1:21:94:f7:2a:a8:54:5a:fa:56:
78:d5:47:d7:31:31:92:5c:e3:28:3f:3b:a4:a6:66:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:31:02:D3:F3:07:DD:A4:7B:D1:A3:E3:94:75:9D:45:A0:56:7C
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/47kxAtPzB92ke9Gj45R1nUWgVnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.26.0/23
176.116.4.0/24
185.77.23.0/24
185.188.16.0/24
217.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
26:43:05:9e:ff:d4:4f:28:8c:8f:ad:68:c3:89:db:57:21:aa:
3a:01:d9:ea:36:9d:aa:03:46:e4:37:4d:79:f5:bf:b3:eb:14:
48:c1:21:a4:87:1b:b8:5f:f5:02:d9:0e:21:59:cf:7b:6f:d9:
78:31:cd:50:02:1f:75:ab:b7:15:44:7d:cd:07:54:c4:7d:be:
4e:42:0f:bb:d7:cf:65:9c:d7:bd:a7:9c:e7:52:0f:ca:e7:55:
55:35:dc:73:19:9e:39:83:c6:e0:2e:23:bc:1a:ae:18:b6:be:
92:8b:46:24:26:5d:84:58:7c:11:cc:12:17:16:9f:12:f8:18:
72:4a:b2:1f:81:05:c7:cb:9b:76:79:c2:05:bd:5a:02:69:ec:
cf:e2:d0:86:4b:cb:44:56:16:50:64:c8:15:92:87:f4:9a:3f:
ff:7d:36:bb:b6:b6:97:50:2f:6f:1a:9c:31:28:c5:d7:63:b3:
8e:a6:96:da:d9:d9:db:fc:3d:15:bf:7d:6e:9c:89:d9:f7:9d:
8d:41:0e:78:c3:43:cf:f5:38:41:03:84:7f:e6:53:74:78:1b:
7a:e9:ec:59:ca:60:c4:90:14:08:66:80:b3:2d:85:6c:12:9b:
07:38:24:c5:ed:03:f7:b0:9f:5b:90:48:c3:9d:a2:1c:1d:a6:
42:91:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:35:53 2026 by rpki-client